new admin password based escalation